Privacy Policy

1. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information that identifies, or could reasonably be used to identify, a natural person, including name, email address, phone number, Indonesian national identity number (NIK on KTP), financial account details, and device identifiers.
• "Processing" means any operation performed on personal data, including collection, recording, storage, use, disclosure, transfer, or deletion.
• "Data Controller" refers to giat4d as the entity that determines the purposes and means of processing your personal data.
• "Data Processor" refers to any third party that processes personal data on behalf of giat4d under a contractual data processing agreement.
• "KYC" stands for Know Your Customer — the identity and age verification process required before processing withdrawals and pursuant to anti-money laundering obligations.
• "Cookies" refers to small text files placed on your device by our website to facilitate session management, analytics, and personalization.

2. Data Controller Information

The data controller responsible for your personal data is giat4d, operating the online platform accessible at https://giat4d.cam. giat4d operates under an international gaming license issued by an offshore regulatory jurisdiction. Our primary operational language for user communications is English, and our platform is designed for users located in Indonesia.

For all data protection inquiries, requests, or complaints, you may contact our Data Protection contact via email at [email protected]. Please include "Data Protection" in the subject line of your message so it is routed to the appropriate team.

3. Data We Collect

3.1 Information You Provide Directly

When you register an account or use our services, we collect information that you provide to us directly, including:

• Registration data: Full legal name, date of birth, email address, mobile phone number, and residential address in Indonesia (including city and province, e.g., Jakarta, Surabaya, Bandung, Medan, Bali).
• KYC / Identity verification documents: Scanned copies or photographs of government-issued ID documents such as Indonesian KTP (Kartu Tanda Penduduk), passport, or SIM (driver's license); proof of address documents; and proof of payment method ownership.
• Financial information: Bank account details for BCA, BRI, BNI, Mandiri, CIMB Niaga, OCBC NISP, or Bank Danamon; e-wallet account identifiers for OVO, DANA, GoPay, ShopeePay, or LinkAja. We do not store full card numbers or banking passwords.
• Communication data: Messages you send to customer support via live chat or email, including inquiry content and support ticket history.
• Responsible gaming data: Self-reported gambling habits, deposit limit preferences, self-exclusion requests, and any information shared when seeking responsible gaming support.

3.2 Data Collected Automatically

When you access or use the giat4d platform, we automatically collect certain technical and behavioral data, including:

• Device and connection data: IP address, device type (desktop, smartphone, tablet), operating system, browser type and version, screen resolution, and mobile network operator (e.g., Telkomsel, Indosat, XL Axiata, Tri).
• Usage and behavioral data: Pages visited, session duration, betting history, game play history, deposit and withdrawal transaction records, click patterns, search queries within the platform, and time-stamp logs.
• Location data: General geographic location inferred from IP address (country, city). We do not collect precise GPS-level location data.
• Cookie and tracking data: Session identifiers, preference cookies, and analytics data as described in Section 9 of this policy.

3.3 Data Received from Third Parties

We may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification service providers (KYC/AML vendors) who confirm or validate the documents you submit.
• Payment processors and banking partners (BCA, BRI, BNI, Mandiri, and e-wallet operators) who confirm transaction status and detect fraudulent payment activity.
• Fraud detection and anti-money laundering screening services that cross-reference your data against watchlists and sanctions databases as required by international gaming regulations.

4. How We Use Your Data

We use your personal data for the following specific purposes:

Purpose	Data Used
Account creation and management	Registration data, email, phone number
Identity verification (KYC)	Government ID, date of birth, address
Processing deposits and withdrawals	Bank/e-wallet account details, transaction records
Fraud prevention and security	IP address, device data, transaction patterns
Anti-money laundering compliance	Identity documents, transaction history
Customer support	Contact data, support ticket history
Platform personalization	Usage data, betting history, game preferences
Responsible gaming monitoring	Deposit patterns, play frequency, self-reported data
Service improvement and analytics	Aggregated, anonymized usage data
Legal and regulatory compliance	All categories as required by applicable law

We do not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except for routine fraud detection screening which is always subject to manual review upon request.

5. Legal Basis for Processing

Our processing of your personal data is grounded in the following legal bases, consistent with internationally recognized data protection principles:

• Contractual necessity: We process your data to perform the contract we have with you (the account agreement governed by our Terms & Conditions), including creating your account, processing bets, and handling payments.
• Legal obligation: Certain processing is required by applicable law — particularly KYC identity verification, transaction record retention, and anti-money laundering screening obligations imposed by our gaming license conditions.
• Legitimate interests: We process data for fraud prevention, platform security, and service improvement where these interests do not override your privacy rights.
• Consent: Where we process data for marketing communications or non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

6. Data Sharing and Disclosure

giat4d does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following limited circumstances:

6.1 Service Providers (Data Processors)

We engage trusted third-party service providers to assist in operating the platform. These providers process your data strictly on our instructions under data processing agreements that impose appropriate security and confidentiality obligations. Categories of service providers include:

• KYC/identity verification vendors
• Payment processing partners (Indonesian banks and e-wallet operators: BCA, BRI, BNI, Mandiri, OVO, DANA, GoPay, ShopeePay, LinkAja)
• Cloud hosting and infrastructure providers
• Fraud detection and anti-money laundering screening services
• Customer support software providers
• Analytics platforms (using anonymized or aggregated data only)

6.2 Game Studios

Third-party game providers (such as Pragmatic Play, Evolution Gaming, Microgaming, NetEnt, and Spribe) may receive limited data — such as a pseudonymous player ID and bet amounts — necessary to facilitate game play. These studios operate under their own data protection obligations consistent with their gaming licenses.

6.3 Legal and Regulatory Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts when required to do so by applicable law, court order, or in connection with our obligations under our gaming license. We will notify you of such disclosures where legally permitted to do so.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of g iat4d's assets, your personal data may be transferred to the acquiring entity. We will provide notice of any such transfer and ensure that the acquiring party is bound by privacy obligations no less protective than those in this policy.

7. Data Retention

We retain your personal data for as long as is necessary to fulfill the purposes described in this policy, subject to the following specific retention periods:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations.
• KYC documents: Retained for a minimum of five (5) years following the end of the customer relationship.
• Customer support records: Retained for up to three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Technical and log data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of consent.

When personal data is no longer required for any of the above purposes, we will securely delete or anonymize it in accordance with our internal data disposal procedures.

8. Security Measures

giat4d implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• Encryption in transit: All data exchanged between your browser or device and our servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data and financial records stored on our servers are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to giat4d personnel who have a legitimate business need. All staff with data access are subject to confidentiality obligations and periodic access reviews.
• Two-factor authentication (2FA): Available to Players for account login, and required internally for all administrative access to systems containing personal data.
• Regular security audits: Our platform undergoes periodic third-party penetration testing and vulnerability assessments to identify and remediate security weaknesses.
• Intrusion detection: Automated monitoring systems flag unusual access patterns, login anomalies, and potential data exfiltration attempts in real time.

While we take every reasonable precaution to protect your data, no internet-based system is completely immune to security risks. You also play an important role in keeping your account secure — please use a strong, unique password and enable two-factor authentication if available. Contact us immediately at [email protected] if you suspect your account has been compromised.

9. Cookies and Tracking Technologies

9.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They allow websites to remember your preferences, maintain your session state, and gather analytics data. giat4d uses cookies and similar technologies (such as local storage and pixel tags) to operate the platform efficiently and improve your experience.

9.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for core platform functionality, including maintaining your login session, processing transactions, and ensuring security. These cannot be disabled without impairing the platform's operation.
• Performance and analytics cookies: Collect anonymized data about how users interact with the platform — such as which pages are visited most, average session duration, and error occurrences — to help us improve performance and usability.
• Functional cookies: Remember your preferences such as language settings, display options, and previously used payment methods to provide a more personalized experience.
• Security cookies: Help detect and prevent fraud, bot activity, and unauthorized account access by tracking session integrity signals.

9.3 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling cookies may affect the functionality of certain platform features, including staying logged in across sessions. Refer to your browser's help documentation for instructions on cookie management.

10. Your Data Rights

As a user of the giat4d platform, you hold the following rights with respect to your personal data. To exercise any of these rights, contact our support team at [email protected] with the subject line "Data Rights Request." We will respond within thirty (30) days of receiving your request.

• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: If any personal data we hold is inaccurate or incomplete, you may request that it be corrected or updated. For account details, many fields can be updated directly within your account settings.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations (e.g., we must retain transaction records and KYC documents for a minimum of five years under anti-money laundering regulations).
• Right to Restriction of Processing: In certain circumstances (e.g., while a dispute is being investigated), you may request that we restrict the processing of your data rather than delete it.
• Right to Data Portability: Where processing is based on your consent or contract performance and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to Object: You may object to processing based on our legitimate interests, including profiling for responsible gaming monitoring. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on consent (e.g., marketing emails), you may withdraw your consent at any time without affecting the lawfulness of prior processing.

11. Protection of Minors

The giat4d platform is strictly intended for adults aged 21 years and older. We do not knowingly collect personal data from individuals under the age of 21. During account registration, we require users to confirm their date of birth, and this information is verified during the KYC process through government-issued identity documentation.

If we become aware — through any means — that an account has been created by or is being used by a person under the age of 21, we will immediately suspend that account, void any pending bets, and take appropriate steps to return any deposited funds to the originating payment method, less any winnings derived from underage play which will be forfeited. We encourage parents and guardians to make use of internet filtering and parental control tools to prevent underage access to online gambling websites.

12. International Data Transfers

giat4d operates with a global infrastructure, and your personal data may be transferred to and processed in countries outside Indonesia, including the jurisdiction in which our servers and data centers are located. These jurisdictions may have different data protection laws than those applicable in Indonesia.

Where we transfer your personal data internationally, we ensure appropriate safeguards are in place, including contractual protections with our service providers that require them to apply data protection standards consistent with this policy. By using giat4d, you consent to such international transfers as necessary to provide the services described in this policy.

13. Changes to This Policy

giat4d reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active users via email or an on-site notification banner.

Your continued use of the giat4d platform following any posted changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how we protect your data. If you disagree with any changes, you may request account closure as described in our Terms & Conditions.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data protection practices, please reach out to us through any of the following channels:

• Email: [email protected] (subject line: "Privacy Policy Inquiry" or "Data Rights Request")
• Live Chat: Available 24/7 through the platform interface
• Response Time: We aim to respond to all data-related inquiries within 30 days of receipt. Complex requests may take up to 60 days, in which case we will notify you of the extended timeline.

Our customer support team operates around the clock on Western Indonesia Time (WIB, UTC+7) and includes Indonesian-speaking agents who can assist with privacy inquiries in either English or Bahasa Indonesia.